Is CVE-2026-85179 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-85179 being exploited in the wild.

How severe is CVE-2026-85179?

High severity, with a CVSS score of 8.5, published 3 September 2026.

Which products and versions are affected?

HumanSignal Label Studio through 1.23.0.

Is there a fix for CVE-2026-85179?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-85179 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2026-85179?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-85179: Label Studio webhook URL validation bypass

CVE-2026-85179 · Severity: high · CVSS 8.5 · Published 2026-09-03

Label Studio is a web-based data annotation platform used by teams to label and categorize training data for machine learning. The application fails to properly validate webhook destination URLs, allowing authenticated users to send data to internal networks and cloud metadata services. An attacker with platform access could exfiltrate sensitive annotation data and potentially access cloud credentials or private infrastructure.

Quick answers

Is CVE-2026-85179 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-85179 being exploited in the wild.
How severe is CVE-2026-85179?: High severity, with a CVSS score of 8.5, published 3 September 2026.
Which products and versions are affected?: HumanSignal Label Studio through 1.23.0.
Is there a fix for CVE-2026-85179?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-85179 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2026-85179?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

Label Studio through version 1.23.0 lacks proper URL validation in the webhook functionality (label_studio/webhooks/utils.py), allowing authenticated users to create webhooks targeting RFC 1918 private IP ranges and cloud metadata endpoints. The vulnerability enables Server-Side Request Forgery (SSRF) attacks where authenticated users craft webhook configurations to dispatch requests to internal services. An attacker with valid platform credentials can exfiltrate annotation data through webhook payloads sent to attacker-controlled or metadata endpoints. Authentication is required, but the attack occurs post-authentication. Patches should implement URL allowlisting, private IP range blocking, and metadata endpoint restrictions.

Affected products

HumanSignal Label Studio through 1.23.0

Timeline

2026-09-03: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.